unifi_list_port_forwards

What unifi_list_port_forwards does on UniFi Access MCP

AI agents call unifi_list_port_forwards to retrieve information from UniFi Access MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why unifi_list_port_forwards is rated Low

This tool performs read-only retrieval of port forwarding configuration data from the UniFi Network controller. It has no side effects, does not modify state, and does not execute commands or trigger external operations. The blast radius of misuse is minimal — an unauthorized agent could gain visibility into network topology but cannot alter access controls or cause damage. Classified as Read with low severity.

From the tool's definition Tool name and description indicate 'List all port forwarding rules' — a query-only operation that retrieves and displays existing network configuration without modification or execution.

The rule that runs unifi_list_port_forwards safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UniFi Access MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For unifi_list_port_forwards, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "unifi_list_port_forwards": {}
  }
}

Questions about unifi_list_port_forwards